Microsoft Windows Active Directory fails to handle long LDAP requests

Overview A flaw has been discovered in the way that Microsoft's Active Directory service handles large LDAP requests. This flaw could result in a denial-of-service vulnerability. Description The directory services provided by Microsoft's Active Directory are based on the Lightweight Directory...

CVE-2003-0507

Summary: CVE-2003-0507 is a stack-based buffer overflow in Microsoft Windows 2000 Active Directory (LSASS.exe) triggered by an LDAP v3 search request with a large number of qualifiers (e.g., multiple AND/OR statements), leading to a denial of service (reboot) and potential arbitrary code executio...

CVE-2003-0507

Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service reboot and possibly execute arbitrary code via an LDAP version 3 search request with a large number of 1 "AND," 2 "OR," and possibly other statements, which causes...

CVE-2003-0507: Undefined Security Weakness

Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service reboot and possibly execute arbitrary code via an LDAP version 3 search request with a large number of 1 "AND," 2 "OR," and possibly other statements, which causes...

core.active.txt

Core Security Technologies Advisory http://www.coresecurity.com Active Directory Stack Overflow Date Published: 2003-07-02 Last Update: 2003-07-02 Advisory ID: CORE-2003-0305-03 Bugtraq ID: 7930 CVE Name: None currently assigned. Title: Active Directory Stack Overflow Class: Boundary Error...

Windows 2000 Active Directory buffer overflow

Stack overflow on LDAP search request with more than 1000 "AND" statements...

CORE-2003-0305-03: Active Directory Stack Overflow

Core Security Technologies Advisory http://www.coresecurity.com Active Directory Stack Overflow Date Published: 2003-07-02 Last Update: 2003-07-02 Advisory ID: CORE-2003-0305-03 Bugtraq ID: 7930 CVE Name: None currently assigned. Title: Active Directory Stack Overflow Class: Boundary Error...

Microsoft Windows Server 2000 - Active Directory Remote Stack Overflow

Microsoft Windows Server 2000 - Active Directory Remote Stack Overflow source: https://www.securityfocus.com/bid/7930/info A vulnerability has been discovered in Microsoft Windows 2000. The problem occurs in the Active Directory component and will result in a denial of service. An unauthenticated...

Active Directory Stack Overflow

Advisory ID Internal CORE-2003-0305-03 Date Published: 2003-07-02 Last Update: 2004-04-21 Advisory ID: CORE-2003-0305-03 Bugtraq ID: 7930 CVE Name: CAN-2003-0663 Title: Active Directory Stack Overflow Class: Boundary Error Condition, Denial of Service Remotely Exploitable: Yes Locally Exploitable...

Microsoft Windows Server 2000 - Active Directory Remote Stack Overflow

source: https://www.securityfocus.com/bid/7930/info A vulnerability has been discovered in Microsoft Windows 2000. The problem occurs in the Active Directory component and will result in a denial of service. An unauthenticated attacker could exploit this vulnerability by transmitting a malformed...

CVE-2002-2328

Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service hang via an LDAP client that sets the page length to zero during a large request...

Microsoft Active Directory security vulnerability

A few weeks ago, I was developing a script to be run on UNIX that would query a Microsoft Active Directory server via LDAP. I authenticated to the Windows 2000 Realm using Kerberos V for information on Kerberos interoperability see...

Microsoft Windows 2000 Active Directory LDAP DoS

Malformed LDAP-request causes Active Directory to hang...

MS02-016: Opening Group Policy Files (318089)

The remote version of Windows contains a flaw in the Group Policy Object GPO access right of Active Directory that could allow a user to prevent the GPO to be applied to other users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10945; scriptversion"1.38";...

CVE-2000-0311

Technical details for CVE-2000-0311 are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0311

The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability...

CVE-2000-0311: Undefined Security Weakness

The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability...

Microsoft Security Bulletin (MS00-026)

Microsoft Security Bulletin MS00-026 ====================================== Patch Available for "Mixed Object Access" Vulnerability Originally Posted: April 20, 2000 Summary - ------- Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 2000 that could,...

CVE-2000-0311

The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability...

DUO-PSA-2020-002: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2020-002 Publication Date: 2020-04-28 Revision Date: 2020-04-28 Status: Confirmed, Fixed Document Revision: 1 Overview Duo Engineering has identified and fixed an issue with directory sync for on-premises Microsoft Active Directory, OpenLDAP, and...